Protection of Personal Data

CTR International Certification and Inspection Ltd. Co. ("Company") attaches the utmost importance to the security of your personal data. With this awareness, we emphasize the processing and preservation of all personal data belonging to individuals associated with our Company, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 ("KVKK"). As the "Data Controller," defined in the Law, we process your personal data within the limits prescribed by the legislation and as described below.

Data Controller

CTR International Certification and Inspection Ltd. Co.
ctr@ctr.com.tr - ctr.belgelendirme@hs03.kep.tr
Batı Bulvarı ATB İş Merkezi G Blok No:160 Macunköy, Yenimahalle, ANKARA
+90 312 397 82 00

Collection, Processing, and Purposes of Processing Personal Data

Your personal data may be collected verbally, in writing, or electronically through non-automated and, in some cases, partially automated methods via our Company units, offices, partner institutions, website, social media platforms, and similar channels. Your personal data may be created and updated as long as you benefit from our services.

Additionally, your personal data may be processed when you call our contact numbers, use the contact page on our website, visit our Company, or participate in training, seminars, or events organized by our Company.

Your collected personal data will be processed to enable you to benefit from our services, ensure legal and commercial security, determine and implement Company strategies, and manage human resources policies—within the conditions set forth in Articles 5 and 6 of KVKK.

Recipients and Purposes of Transferring Processed Personal Data

Your data may be transferred to business partners, suppliers, accreditation bodies, authorizing authorities, relevant units of ministries, Company officials, shareholders, and legally authorized public institutions or private persons—within the purposes and conditions defined in KVKK.

Method and Legal Grounds for Collecting Personal Data

Your personal data are obtained verbally, in writing, or electronically to provide services in accordance with legal requirements, fulfill contractual and accreditation obligations, and ensure facility security. Data collected on these legal grounds may be processed and transferred as described in this document and within Articles 5 and 6 of KVKK.

Rights of the Personal Data Owner

If you submit your requests regarding your rights using the methods outlined in this text, our Company will respond within thirty days. Up to 10 pages are free of charge; for more, 1 TL per page may apply. If provided on a storage medium such as a CD or flash drive, the fee equals the cost of the medium. Fees are refunded if the request results from the Data Controller's error.

Personal data owners have the right to:

• Learn whether personal data has been processed,
• Request information if personal data has been processed,
• Learn the purpose of processing and whether it is used appropriately,
• Know third parties to whom data is transferred, domestically or abroad,
• Request correction of incomplete or inaccurate data and notification to third parties,
• Request deletion or destruction of personal data and notification to third parties,
• Object to unfavorable results arising from automated processing,
• Request compensation for damage caused by unlawful processing.

To exercise these rights, you may submit the signed Data Subject Application Form (G.FR.34) and identity-confirming documents to the address above, or send a secure electronic signed application to ctr@ctr.com.tr, or via KEP to ctr.belgelendirme@hs03.kep.tr.

01.07.2021, Revision 00